Support multiple client_id values, per security definition
See original GitHub issueui.initOAuth
should support specifying configuration per-security definition. Specifically client_id and client_secret values.
My API has multiple security definitions available. But the Swagger UI has a different ClientID for each one (being that they are different providers). I am currently unable to use both without removing the client_id and specifying it manually in the textbox during authenticaiton.
Issue Analytics
- State:
- Created 5 years ago
- Reactions:52
- Comments:8 (1 by maintainers)
Top Results From Across the Web
The Client ID and Secret - OAuth 2.0 Simplified
The client_id is a public identifier for apps. Even though it's public, it's best that it isn't guessable by third parties, so many ......
Read more >Swagger - Adding multiple security parameters to the same ...
The object can have multiple security schemes declared in it which are all required (that is, there is a logical AND between the...
Read more >How to Use Client Credentials Flow with Spring Security
The client credentials grant is used when two servers need to communicate with each other outside the context of a user.
Read more >Client application configuration (MSAL) - Microsoft Entra
The client ID is the unique Application (client) ID assigned to your app by Azure AD when the app was registered. You can...
Read more >12. OAuth2 - Spring
spring: security: oauth2: client: registration: google: client-id: google-client-id ... There are some OAuth 2.0 Providers that support multi-tenancy, ...
Read more >Top Related Medium Post
No results found
Top Related StackOverflow Question
No results found
Troubleshoot Live Code
Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start FreeTop Related Reddit Thread
No results found
Top Related Hackernoon Post
No results found
Top Related Tweet
No results found
Top Related Dev.to Post
No results found
Top Related Hashnode Post
No results found
Top GitHub Comments
Me too! I have one security definition for my oauth2 setup, which accepts all 4 oauth 2 grant types/flows. However, each flow has a differently configured client! It would be good if the initialisation function take both which definition you are referring to, and if an oauth 2 type, which flow we were talking about.
Here is btw. kind of a duplicate to it: https://github.com/swagger-api/swagger-ui/issues/4087 Someone started working on it, but it looks like it was never finished.
I’m actually wondering, that this did not get more feedback already. It’s such a common usecase, when different public (or internal) auth providers like Google, Microsoft, Facebook are accepted.
We even have legacy flows which do not need a
client_id
at all and the UI always sends the one which is setup globally.